The post method really hung me up for a few hours today. The documentation doesn't mention that it is encoding htmlspecialchars. I finally looked at the post method in the engine and found my problem.

I'm reading data from MySQL to a form. I use htmlspecialchars on my form data so it displays correctly. Then I use htmlspecialchars_decode on the $_POST data. For some reason single quotes were getting encoded as ' in my database. This was happening even after running htmlspecialchars_decode.

I would think that Trongate's post method would be using htmlspecialchars_decode instead of htmlspecialchars. What is the reason for encoding htmlspecialchars on posted values?

Trongate Version: 1.3.3038

I found a solution to fix the single quote.

However, I still like to know the reason why the engine's post method is encoding htmlspecialchars.

Saw a new commit get posted.

Looking forward to trying out the new code when I get back to work.